[WaxProlix]

You're right in a sense, but there's no aws-managed bastion. Session manager communicates with your instance via an outbound-created websocket connection. Inputs and outputs are piped through it.

[idunno246]

yea, i was trying to keep things simplified, but it has to proxy through something behind the vpc endpoint. could also say its not technically ssh

[zokier]

Though you can actually get ssh through ssm: https://docs.aws.amazon.com/systems-manager/latest/userguide...